CAT is an application to facilitate manual web application penetration testing. It was designed to cope with a more demanding level of application testing, taking away some of the more repetitive nature of testing and allowing the tester to focus their time instead on the individual application, enabling them to conduct a much more thorough test.

There are a number of features which CAT has to enable a wide variety of testing to be conducted:

Request Repeater â€“ Used for repeating a single request

Proxy â€“ Classic Inline proxy

Fuzzer â€“ Allows for batch of tests to be sent to a server for brute forcing, parameter fuzzing, forced browsing etc.

Log â€“ View a list of requests to sort, search repeat etc. Allows for a sequence of requests to be repeated and modified.

Authentication Checker â€“ Two synchronised proxies which can be used to check authentication and authorisation controls.

SSL Checker â€“ Request a specific page with various SSL ciphers and versions.

Notepad â€“ A text/RTF editor which can be used as a scratch pad for conversions etc.